Google Answers Logo
View Question
 
Q: SMS spoofing - is authentication of the sender possible? ( No Answer,   2 Comments )
Question  
Subject: SMS spoofing - is authentication of the sender possible?
Category: Computers > Wireless and Mobile
Asked by: ken13-ga
List Price: $20.00
Posted: 03 Jan 2005 21:08 PST
Expires: 02 Feb 2005 21:08 PST
Question ID: 451446
Dear Google Answers:

It is my understanding that the sender of an SMS text message can
easily be spoofed.  See here for example:

http://www.asianlaws.org/cert/sms_spoofing.htm

That is, as a recipient of a text message on my mobile phone I cannot
be certain who the sender really is.  If this is indeed true, then my
question is? has any work been done to provide authentication
mechanisms for SMS?

A good answer will illuminate what are the spoofing risks in SMS, what
has already been done (i.e., state-of-the-art) to minimize these
risks, and what possibly could be done.

Thanks!
Answer  
There is no answer at this time.

Comments  
Subject: Re: SMS spoofing - is authentication of the sender possible?
From: topbanana-ga on 05 Jan 2005 04:28 PST
 
In my limited knowledge of the subject, as far as I understand it is
impossible to spoof sms messages from a mobile device and it can only
be done via the internet through devices networked to sms gateways.

An example of this would be the www.sms.ac service, which allows users
to send messages via the internet. The authentication mechanism that
you speak of in this instance is a text message 'pin code' sent to the
users mobile phone, which they then have to input into a secure web
page to confirm that that mobile phone number is theirs before being
allowed to send messages.

Some services used to exist which didn't bother doing this (eg.
www.redcoal.com) and one could send text messages seemingly appearing
from whichever mobile number the user placed in the "from" field.
However, I believe they have now wisened up to this.

So in short, work has been done to provide authentication mechanisms for SMS.
Subject: Re: SMS spoofing - is authentication of the sender possible?
From: ken13-ga on 05 Jan 2005 07:04 PST
 
Thank you for the comment.  Spoofing via the Internet is a concern. 
Imagine if someone could spoof a traffic alert... then they could
create traffic jams.  You can imagine worse situations too, I am sure.
 Here is an example:

http://infotech.indiatimes.com/articleshow/776694.cms

Thanks!

Important Disclaimer: Answers and comments provided on Google Answers are general information, and are not intended to substitute for informed professional medical, psychiatric, psychological, tax, legal, investment, accounting, or other professional advice. Google does not endorse, and expressly disclaims liability for any product, manufacturer, distributor, service or service provider mentioned or any opinion expressed in answers or comments. Please read carefully the Google Answers Terms of Service.

If you feel that you have found inappropriate content, please let us know by emailing us at answers-support@google.com with the question ID listed above. Thank you.
Search Google Answers for
Google Answers  


Google Home - Answers FAQ - Terms of Service - Privacy Policy